Wireshark · Wireshark-users: Re: [Wireshark-users] tcp.window_size OR tcp.window_size_value ??

[<Tim.Poth@xxxxxxxxxxx>]

'tcp.window_size_value'  is the value in the TCP header for window size, EG 511 in the example im looking at.
'tcp.window_size' is the Calculated size for the window if windows scaling is enabled, EG 130816 in the example im looking at (scaling factor of 256 times 511 for the 'tcp.window_size_value' )

If you want to know what the effective window size is (value in the header times scaling factor) I would say 'tcp.window_size' would be the better filter (less math for you involved)

Hope that helps
tim

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Marco Zuppone
Sent: Wednesday, November 02, 2011 3:57 PM
To: Community support list for Wireshark
Subject: [Wireshark-users] tcp.window_size OR tcp.window_size_value ??

Hello,

what is the difference between tcp.window_size and tcp.window_size_value ?
 Which one is better to use?
 Thanks & Regards,
StockTrader - Marco
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe